This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/84757A9A030B11F099FC1410C4F9AE02.roa File: 84757A9A030B11F099FC1410C4F9AE02.roa (raw, json) Hash identifier: EBxLaXLba3ybeQ1SlmH7GzP8NlDiABfKS2zIQpf4Zlg= Subject key identifier: 1E:AC:D7:1B:2A:FA:4B:6E:C3:3D:29:75:33:77:03:1D:63:CA:50:E7 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 02D2 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/84757A9A030B11F099FC1410C4F9AE02.roa Signing time: Mon 17 Mar 2025 08:40:45 +0000 ROA not before: Mon 17 Mar 2025 08:40:45 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142382 IP address blocks: 202.155.157.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Mar 17 08:40:45 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67d7e00d-1b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:07:fe:00:ef:75:5a:bb:3b:5e:4b:9a:44: 13:7c:58:38:0f:10:84:84:30:e9:0c:a7:d6:61:5b: 2a:51:9c:2b:bc:14:28:aa:79:56:86:f8:fa:15:9c: ff:ea:e4:43:fd:28:9e:02:a2:2e:4d:1c:df:aa:c0: 6a:de:33:a6:68:10:3d:3c:76:06:86:d2:a8:39:a8: 04:bc:83:7f:a5:c5:9f:0c:6e:d3:1e:94:36:ed:c8: 12:20:84:f7:29:76:05:6f:f6:c6:ef:b6:6e:6a:3f: cb:11:e9:46:4c:fe:04:2a:27:6f:74:da:fd:b6:16: 81:fe:5c:46:0e:ab:71:f6:12:f8:66:79:a3:8f:bc: 67:8a:6e:e9:b9:71:58:80:97:17:d2:f4:05:f0:e0: 68:ac:53:70:ad:6f:3c:0e:f9:e9:bb:a1:91:e2:46: 6c:7a:0c:f9:3a:1f:c0:12:0f:32:94:64:cb:fa:0c: 30:55:56:bf:b2:d6:00:f9:c3:df:1e:7c:39:be:f7: 71:73:d2:39:8e:18:11:4f:82:66:c8:61:52:94:86: 48:44:c3:23:91:f1:22:db:8f:8a:9f:d7:59:93:70: 07:fa:98:f6:20:12:db:1d:f2:dd:a9:68:72:e8:31: d7:71:88:39:eb:78:24:20:f2:77:2e:6c:f3:dc:80: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:D7:1B:2A:FA:4B:6E:C3:3D:29:75:33:77:03:1D:63:CA:50:E7 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/84757A9A030B11F099FC1410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.157.0/24 Signature Algorithm: sha256WithRSAEncryption 60:97:9c:dc:0d:d1:50:4b:ad:0a:24:c6:29:1c:12:ab:0b:45: 22:ac:70:da:71:38:02:6c:1e:70:71:e8:6e:7f:8d:cf:f5:9f: 78:84:6e:f9:02:6f:9c:d4:a4:ab:d2:fe:2b:b4:14:02:a8:ba: 29:20:2a:e6:00:33:07:53:a0:f9:f8:b1:5c:76:a6:7e:81:30: 59:77:b0:6f:dc:e9:9e:64:0b:21:41:60:cf:0e:45:16:05:b2: 93:0c:ea:a7:47:88:42:30:32:fc:14:19:c1:fa:f2:0c:ca:9d: 5b:0a:5c:2b:54:b0:95:32:b6:b2:40:72:82:6e:c4:19:ee:1f: 4b:4e:06:74:f3:05:ae:11:39:32:84:23:80:4a:3a:56:ea:87: 63:a6:2a:04:ca:e3:21:46:5c:03:0a:95:f0:7d:8a:da:bd:13: a1:45:2c:5d:dc:c6:b9:67:f1:3d:35:c5:6c:2e:1c:ed:4b:91: 01:18:f1:96:1c:ea:27:28:0e:50:20:4e:7d:29:54:b2:8d:b4: 87:34:74:a2:c4:9b:5a:74:ec:ae:32:ed:3a:1b:ff:ec:5b:38: b7:24:ed:94:78:bd:b9:39:bd:f0:49:24:7b:80:09:a2:26:82: 20:eb:db:7b:b6:22:53:af:6e:d0:7c:11:59:85:cc:b9:0d:a1: fe:88:30:75 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwMzE3MDg0MDQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3ZTAwZC0xYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW8H/gDvdVq7O15LmkQTfFg4DxCEhDDpDKfWYVsqUZwrvBQoqnlWhvj6FZz/ 6uRD/SieAqIuTRzfqsBq3jOmaBA9PHYGhtKoOagEvIN/pcWfDG7THpQ27cgSIIT3 KXYFb/bG77Zuaj/LEelGTP4EKidvdNr9thaB/lxGDqtx9hL4Znmjj7xnim7puXFY gJcX0vQF8OBorFNwrW88Dvnpu6GR4kZsegz5Oh/AEg8ylGTL+gwwVVa/stYA+cPf Hnw5vvdxc9I5jhgRT4JmyGFSlIZIRMMjkfEi24+Kn9dZk3AH+pj2IBLbHfLdqWhy 6DHXcYg563gkIPJ3Lmzz3IAVqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB6s1xsq +ktuwz0pdTN3Ax1jylDnMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvODQ3NTdBOUEw MzBCMTFGMDk5RkMxNDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKm50wDQYJKoZIhvcNAQELBQADggEBAGCXnNwN0VBLrQok xikcEqsLRSKscNpxOAJsHnBx6G5/jc/1n3iEbvkCb5zUpKvS/iu0FAKouikgKuYA MwdToPn4sVx2pn6BMFl3sG/c6Z5kCyFBYM8ORRYFspMM6qdHiEIwMvwUGcH68gzK nVsKXCtUsJUytrJAcoJuxBnuH0tOBnTzBa4ROTKEI4BKOlbqh2OmKgTK4yFGXAMK lfB9itq9E6FFLF3cxrln8T01xWwuHO1LkQEY8ZYc6icoDlAgTn0pVLKNtIc0dKLE m1p07K4y7Tob/+xbOLck7ZR4vbk5vfBJJHuACaImgiDr23u2IlOvbtB8EVmFzLkN of6IMHU= -----END CERTIFICATE-----Generated at Mon Dec 29 08:25:37 2025 by rpki-client